Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/9AEB003836DD11EABDA48574C4F9AE02.roa
File:                     9AEB003836DD11EABDA48574C4F9AE02.roa (raw, json)
Hash identifier:          COXKpXUz9ewhDs2xWYKhMF6dg1ONX6DEH6N3BhqdcJY=
Subject key identifier:   73:7D:94:22:4B:41:5E:16:FF:20:39:78:E3:95:BF:45:BD:14:74:3D
Certificate issuer:       /CN=A914882C/serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB
Certificate serial:       0ACC
Authority key identifier: FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/9AEB003836DD11EABDA48574C4F9AE02.roa
Signing time:             Wed 02 Oct 2024 19:28:22 +0000
ROA not before:           Wed 02 Oct 2024 19:28:22 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     139463
IP address blocks:        103.141.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl
                          rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2764 (0xacc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914882C/serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB
        Validity
            Not Before: Oct  2 19:28:22 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=66fd9ed6-2212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:50:9a:88:1a:bd:5c:64:eb:e1:fa:39:f6:cd:
                    03:59:dd:51:c5:21:71:d6:4e:52:e1:d9:cc:99:d8:
                    68:18:a8:7f:e7:6e:45:bd:0d:c1:e0:99:07:b7:bc:
                    cc:ee:d7:73:f6:1f:ed:09:c6:67:e6:e6:99:85:71:
                    2e:2d:0b:12:ed:60:38:20:f0:06:52:11:51:23:8e:
                    f6:77:42:30:83:99:81:b2:14:43:16:55:2d:48:cf:
                    fe:b4:5d:c7:8a:32:84:32:98:be:be:c0:69:25:eb:
                    f2:69:83:87:7f:c3:50:1e:12:a2:a4:70:27:8d:27:
                    c9:38:b6:87:42:b0:fe:54:9b:86:ea:07:a3:ac:4b:
                    7d:b3:40:ff:82:a6:91:ad:81:81:74:cb:ce:54:99:
                    f6:a4:da:e0:0c:18:06:cb:bc:98:b9:e1:c1:9e:3e:
                    6c:17:22:82:cc:fd:11:c4:29:43:3a:4a:68:06:83:
                    fa:a4:bf:ca:9c:4e:f3:b7:bb:95:ca:42:b1:a9:4d:
                    13:d9:d2:b5:b9:74:35:38:88:79:1e:ca:c5:5d:d3:
                    e4:44:e7:0f:e8:c1:ef:6e:86:96:79:0b:ad:6a:e5:
                    f6:f6:c5:c7:56:5f:9c:e3:cf:04:a8:4e:a8:f3:1a:
                    f4:48:25:cf:99:dc:d8:70:e7:e2:8d:1c:48:c1:2d:
                    e8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7D:94:22:4B:41:5E:16:FF:20:39:78:E3:95:BF:45:BD:14:74:3D
            X509v3 Authority Key Identifier:
                keyid:FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/9AEB003836DD11EABDA48574C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:cc:b0:8c:9b:ff:77:51:ba:42:47:1d:51:0a:b2:20:da:80:
         24:2b:a9:81:4c:10:75:ea:5c:8a:d3:ec:2d:32:23:e1:9e:53:
         58:3c:8e:77:a9:f7:34:f4:d6:17:fe:3c:64:53:3e:89:93:9d:
         14:0e:04:f5:69:c6:7d:d6:b3:9b:01:77:db:d6:34:7a:63:ac:
         35:20:d6:65:5f:ce:17:fb:4d:cd:50:55:30:16:cf:46:ca:00:
         73:8b:7e:4c:3b:5c:23:2e:43:c0:d7:41:d5:e5:f1:e9:e5:9d:
         9a:9d:00:1f:23:59:14:8b:a5:f4:24:84:92:15:a3:c1:f5:fe:
         87:fe:63:8b:c2:7a:f2:9c:0c:a7:56:5b:a9:4b:8d:1a:be:a0:
         f1:4f:33:da:fa:78:e7:7b:1b:45:c6:ed:22:5e:e6:ea:bb:9b:
         04:78:b5:dc:97:5d:fd:44:2d:c6:14:45:d2:34:c5:f3:2e:c9:
         be:4e:aa:9d:d5:67:8f:2e:f2:a2:f1:a5:b6:1e:5e:c7:ec:b7:
         ab:07:81:5c:6a:03:cc:98:6b:97:28:32:4e:17:f4:08:a8:65:
         b7:a3:3c:7f:86:9f:a2:36:e8:60:9c:5a:23:f4:f6:6a:ea:4e:
         28:44:25:0e:01:58:a2:c3:6b:f9:be:15:4e:80:b7:a9:ec:a0:
         07:0d:bb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org